General

  • Target

    LockBit30.zip

  • Size

    290KB

  • MD5

    00fd93c769694a0b90b2a8ff7af22507

  • SHA1

    6916bcd30b8eac17ad5f3c99b8c98a3d405ffabc

  • SHA256

    7435f2c3f32ab84e2e575a627f418ce39e806ce59a3ad43e481d179deb88e500

  • SHA512

    2e8b00f63743bc43b4572b610fa5a97b2e15af45e11bfe8869ec41d65301db5f6ab5618d9186dfb83b13dfe02a4eeb55bce479d1be6750c2152c9b2cfa76a469

  • SSDEEP

    6144:CN8M9xcI7tZ4ApPZSQQWzl/jhc83syii9mWjXqpNUvupvobLm3gXTix9a:68M9OIEAFoQQWz9hcVhWrqLUvu9o/XXh

Score
10/10

Malware Config

Extracted

Family

blackmatter

Version

25.239

Signatures

  • Blackmatter family
  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • LockBit30.zip
    .zip
  • LockBit30/Build.bat
  • LockBit30/builder.exe
    .exe windows:5 windows x86 arch:x86

    d2e26e45dcb84f1062f90f29a9cf0faa


    Headers

    Imports

    Sections

  • LockBit30/config.json
  • LockBit30/keygen.exe
    .exe windows:5 windows x86 arch:x86

    73eeda700d0a0376845c61c44155f4a8


    Headers

    Imports

    Sections